High riskSocial Media

Fake CAPTCHA Scam

In this scam, a fake CAPTCHA or 'verify you're human' page, often reached via social links or videos, instructs you to press keys or paste a command that secretly installs malware on your device.

Quick verdict

Risk level
High risk
Scam type
Malware delivery (fake verification)
Main red flag
A 'verification' page that asks you to press key combinations or paste a command.
What to do first
Do not follow the steps; real CAPTCHAs never ask you to run commands.

What to know first

In this scam, a fake CAPTCHA or 'verify you're human' page, often reached via social links or videos, instructs you to press keys or paste a command that secretly installs malware on your device.

Social media scams spread through direct messages, ads, hacked friends' accounts, and fake profiles. They range from account-takeover phishing and fake giveaways to investment and romance fraud, exploiting the trust and reach of your own network.

The core pattern to watch for is clear: A 'verification' page that asks you to press key combinations or paste a command. Do not follow the steps; real CAPTCHAs never ask you to run commands.

Related tricks worth knowing: the Malware Attachment Scam and the Fake Tech Support Scam. For the wider picture, browse the Social Media Scams guides or run the message through our scam checker.

Scam statistics

$1.4B
reported lost to fraud that began on social media in the US in 2023
Source: US Federal Trade Commission
Top channel
social media was among the most common ways scams reached people in 2023
Source: US Federal Trade Commission

Tell-tale red flags

  • A CAPTCHA that asks you to press keys or paste a command
  • Instructions to open Run, Terminal, or paste text
  • A page reached via a social link, ad, or video
  • Pressure to complete verification to continue
  • Anything beyond clicking a normal checkbox or image

Staying safe

  • Never paste commands or press key combinations to 'verify'
  • Close the page; real CAPTCHAs only need a click or image selection
  • Run a security scan if you followed any steps
  • Report the page and avoid the source link

How it usually reads

Example pattern, not a real report
Example pattern: 'To verify you are human, press Windows+R, paste this, and hit Enter.' The command installs malware.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What to notice: A 'verification' page that asks you to press key combinations or paste a command.

Steps if you already acted

  • If you ran a command, disconnect from the internet and run a security scan
  • Change important passwords from a different, trusted device
  • Watch for unusual account or device activity
  • Seek help from a trusted technician if needed

Common mistakes

  • Do not paste commands or run scripts to 'verify'
  • Do not press key combinations a page tells you to
  • Do not ignore it if you followed the steps

Scams like this one

High risk Email

Malware Attachment Scam

In a malware attachment scam, an email arrives with a file posing as an invoice, receipt, CV, statement or delivery note. Opening the attachment, or clicking a prompt to 'enable content' or 'enable macros', can quietly install malware that steals passwords, banking logins or files. The message is often crafted to feel urgent or routine so you act before thinking. Treating every unexpected attachment with caution, and verifying it through a separate channel, is one of the most effective defences.

Created by Scam or Safe Editorial Team
High risk Email

Fake Tech Support Scam

This scam uses a pop-up, email, or phone call warning that your computer is infected or your account is compromised, urging you to call a number or allow remote access, after which the fake 'technician' charges fees, installs software, or takes your data.

Created by Scam or Safe Editorial Team
High risk Text Message

Tech Support Text Scam

This scam texts that your device is infected, hacked, or compromised and urges you to call a 'support' number, where a fake agent seeks remote access, payment, or your account details.

Created by Scam or Safe Editorial Team

Your questions answered

How is this CAPTCHA different from a real one?
Real CAPTCHAs only ask you to click a box or select images. A 'CAPTCHA' that tells you to press keys or paste a command is delivering malware.
Why does pasting a command matter?
The command runs on your device and can install malware that steals passwords and data. Never paste commands to 'verify you are human'.
I followed the steps. What now?
Disconnect from the internet, run a security scan, change important passwords from a trusted device, and watch for unusual activity.
Where do these pages come from?
Often via social links, ads, or video descriptions. Be cautious with verification pages reached from untrusted sources.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.